@atlasauth/emulator-core 0.1.0 → 0.3.0

package/dist/handlers/authz.js

@@ -0,0 +1,410 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authzHandlers = authzHandlers;
+const errors_1 = require("../errors");
+const access_signals_1 = require("./access-signals");
+const cedar_1 = require("./cedar");
+const authz_layers_1 = require("./authz-layers");
+const authz_state_1 = require("./authz-state");
+const support_1 = require("./support");
+const util_1 = require("./util");
+/**
+ * Authorization introspection on the engine's own state: `POST /v1/authz/explain` (why a user has or lacks a permission,
+ * asked of all seven layers: organization and app roles, groups, resource roles, ABAC, access policies and FGA tuples),
+ * `POST /v1/authz/rbac/check` (the role check, written to the decision log), `POST /v1/authz/what_if` (replay the logged
+ * role, ABAC and FGA decisions under a candidate change and see what flips), managed FGA sync (memberships, org roles and
+ * groups become tuples in one store, live on every change, with backfill, runs and purge) and the authorization event feed.
+ * The data the layers read is written by the routes in authz-data.
+ */
+const MAX_WAIT_MS = 25_000;
+const REPLAY_LIMIT_DEFAULT = 2000;
+const REPLAY_LIMIT_MAX = 10_000;
+const SAMPLE_CAP = 50;
+const bad = (message, param) => new errors_1.EmulatorError('VALIDATION_FAILED', message, param);
+const obj = (v, field) => {
+    if (v === undefined || v === null)
+        return {};
+    if (typeof v !== 'object' || Array.isArray(v))
+        throw bad(`${field} must be an object.`, field);
+    return v;
+};
+const strList = (v, field) => {
+    if (v === undefined)
+        return [];
+    if (!Array.isArray(v) || v.some((x) => typeof x !== 'string' || !x))
+        throw bad(`${field} must be a list of strings.`, field);
+    return v;
+};
+const tupleList = (v, field) => {
+    if (v === undefined)
+        return [];
+    if (!Array.isArray(v))
+        throw bad(`${field} must be a list of tuples.`, field);
+    return v.map((t, i) => {
+        const o = obj(t, `${field}[${i}]`);
+        if (typeof o.user !== 'string' || typeof o.relation !== 'string' || typeof (o.object ?? o.target) !== 'string')
+            throw bad(`${field}[${i}] requires user, relation and object.`, field);
+        if (!/^[^:#]+:[^#]+(#[^#]+)?$/.test(o.user))
+            throw bad(`${field}[${i}].user is malformed.`, field);
+        return { user: o.user, relation: o.relation, object: (o.object ?? o.target) };
+    });
+};
+const policySources = (v, field) => {
+    if (v === undefined)
+        return [];
+    if (!Array.isArray(v))
+        throw bad(`${field} must be a list.`, field);
+    return v.map((p, i) => {
+        const o = obj(p, `${field}[${i}]`);
+        if (typeof o.name !== 'string' || !o.name || typeof o.source !== 'string' || !o.source)
+            throw bad(`${field}[${i}] needs name and source.`, field);
+        try {
+            (0, cedar_1.parseCedar)(o.source);
+        }
+        catch (err) {
+            if (err instanceof cedar_1.CedarParseError)
+                throw bad(`${field}[${i}].source: ${err.message} (at character ${err.position})`, field);
+            throw err;
+        }
+        return { name: o.name, source: o.source };
+    });
+};
+const time = (v, field) => {
+    if (v === undefined || v === null)
+        return undefined;
+    const t = typeof v === 'number' ? v : typeof v === 'string' ? Date.parse(v) : NaN;
+    if (Number.isNaN(t))
+        throw bad(`${field} must be a millisecond timestamp or an ISO date.`, field);
+    return t;
+};
+function parseCandidate(cand) {
+    const out = {};
+    if (cand.abac !== undefined) {
+        const a = obj(cand.abac, 'candidate.abac');
+        out.abac = { add: policySources(a.add, 'candidate.abac.add'), replace: policySources(a.replace, 'candidate.abac.replace'), remove: strList(a.remove, 'candidate.abac.remove') };
+    }
+    if (cand.rbac !== undefined) {
+        const r = obj(cand.rbac, 'candidate.rbac');
+        if (!Array.isArray(r.roles) || r.roles.length === 0 || r.roles.length > 200)
+            throw bad('candidate.rbac.roles must list 1-200 role edits.', 'candidate.rbac.roles');
+        out.rbac = {
+            roles: r.roles.map((x, i) => {
+                const o = obj(x, `candidate.rbac.roles[${i}]`);
+                if (o.type !== 'org_role' && o.type !== 'app_role')
+                    throw bad('type must be org_role or app_role.', `candidate.rbac.roles[${i}].type`);
+                if (typeof o.key !== 'string' || !o.key)
+                    throw bad('key is required.', `candidate.rbac.roles[${i}].key`);
+                return { type: o.type, key: o.key, organizationId: typeof o.organization_id === 'string' ? o.organization_id : undefined, addPermissions: strList(o.add_permissions, 'add_permissions'), removePermissions: strList(o.remove_permissions, 'remove_permissions') };
+            }),
+        };
+    }
+    if (cand.fga !== undefined) {
+        const f = obj(cand.fga, 'candidate.fga');
+        if (typeof f.store_id !== 'string' || !f.store_id)
+            throw bad('candidate.fga.store_id is required.', 'candidate.fga.store_id');
+        out.fga = { storeId: f.store_id, writes: tupleList(f.writes, 'candidate.fga.writes'), deletes: tupleList(f.deletes, 'candidate.fga.deletes') };
+    }
+    if (cand.access_policy !== undefined)
+        out.accessPolicy = obj(obj(cand.access_policy, 'candidate.access_policy').draft ?? cand.access_policy, 'candidate.access_policy.draft');
+    if (!out.abac && !out.rbac && !out.fga && !out.accessPolicy)
+        throw bad('candidate needs at least one of abac, rbac, fga, access_policy.', 'candidate');
+    return out;
+}
+function runWhatIf(e, body) {
+    const c = parseCandidate(obj(body.candidate, 'candidate'));
+    const until = time(body.until, 'until') ?? e.clock.now();
+    let since = time(body.since, 'since');
+    if (since === undefined) {
+        const days = body.days === undefined ? 7 : body.days;
+        if (!Number.isInteger(days) || days < 1 || days > 30)
+            throw bad('days must be an integer from 1 to 30.', 'days');
+        since = until - days * 86_400_000;
+    }
+    if (since >= until)
+        throw bad('since must be before until.', 'since');
+    if (until - since > 31 * 86_400_000)
+        throw bad('The window can be at most 31 days.', 'since');
+    const limit = body.limit === undefined ? REPLAY_LIMIT_DEFAULT : body.limit;
+    if (!Number.isInteger(limit) || limit < 1 || limit > REPLAY_LIMIT_MAX)
+        throw bad(`limit must be an integer from 1 to ${REPLAY_LIMIT_MAX}.`, 'limit');
+    if (body.name !== undefined && (typeof body.name !== 'string' || body.name.length > 200))
+        throw bad('name must be a string of at most 200 characters.', 'name');
+    if (body.save !== undefined && typeof body.save !== 'boolean')
+        throw bad('save must be a boolean.', 'save');
+    if (c.fga && !(0, authz_state_1.storeExists)(e, c.fga.storeId))
+        throw bad('Unknown FGA store.', 'candidate.fga.store_id');
+    if (c.fga && !(0, authz_layers_1.latestModel)(e, c.fga.storeId))
+        throw bad('The FGA store has no authorization model.', 'candidate.fga.store_id');
+    const by = {};
+    const skippedBy = {};
+    const skip = (reason) => void (skippedBy[reason] = (skippedBy[reason] ?? 0) + 1);
+    const flips = [];
+    const principals = new Set();
+    let replayed = 0;
+    const note = (row, before, after, mismatch) => {
+        replayed++;
+        const s = (by[row.source] ??= { replayed: 0, unchanged: 0, allow_to_deny: 0, deny_to_allow: 0, baseline_mismatch: 0 });
+        s.replayed++;
+        if (mismatch)
+            s.baseline_mismatch++;
+        if (before === after)
+            return void s.unchanged++;
+        if (before === 'allow')
+            s.allow_to_deny++;
+        else
+            s.deny_to_allow++;
+        if (row.principal)
+            principals.add(row.principal);
+        if (flips.length < SAMPLE_CAP)
+            flips.push({ decision_id: row.id, source: row.source, principal: row.principal, action: row.action, resource: row.resource, before, after, at: row.at });
+    };
+    const pdp = c.abac ? (0, authz_layers_1.loadPdp)(e) : null;
+    const cpdp = c.abac && pdp ? (0, authz_layers_1.candidatePdp)(pdp, c.abac) : null;
+    const all = (0, authz_state_1.st)(e).decisions.all().filter((d) => d.at >= since && d.at <= until);
+    const rows = all.slice(0, limit);
+    for (const row of rows) {
+        try {
+            if (['abac', 'authzen', 'mcp_gateway', 'pdp'].includes(row.source) && pdp && cpdp) {
+                const req = row.input;
+                if (!req || typeof req !== 'object' || !req.principal || !req.resource) {
+                    skip('no_input');
+                    continue;
+                }
+                const now = (0, authz_layers_1.abacDecide)(pdp, req).decision;
+                note(row, now, (0, authz_layers_1.abacDecide)(cpdp, req).decision, now !== row.decision);
+            }
+            else if (row.source === 'rbac' && c.rbac) {
+                if (row.result?.kind !== 'role' || !row.action) {
+                    skip('rbac_not_role_based');
+                    continue;
+                }
+                note(row, row.decision, (0, authz_layers_1.replayRoleDecision)(row.result, c.rbac.roles, row.action) ? 'allow' : 'deny', false);
+            }
+            else if (row.source === 'fga' && c.fga) {
+                if (row.policyVersion?.store_id !== c.fga.storeId) {
+                    skip('other_store');
+                    continue;
+                }
+                const i = row.input ?? {};
+                if (!i.user || !i.relation || !i.object) {
+                    skip('no_input');
+                    continue;
+                }
+                const req = { user: i.user, relation: i.relation, object: i.object, contextual: i.contextual_tuples };
+                const now = (0, authz_layers_1.fgaCheck)(e, c.fga.storeId, req) ? 'allow' : 'deny';
+                note(row, now, (0, authz_layers_1.fgaCheck)(e, c.fga.storeId, req, { writes: c.fga.writes, deletes: c.fga.deletes }) ? 'allow' : 'deny', now !== row.decision);
+            }
+            else
+                skip(row.source === 'access_policy' ? 'access_policy_replayed_separately' : 'no_matching_candidate');
+        }
+        catch {
+            skip('replay_error');
+        }
+    }
+    // shortcut: the emulator keeps no sampled sign-ins, so an access-policy candidate has nothing to replay against.
+    if (c.accessPolicy)
+        skip('access_policy_no_sampled_sign_ins');
+    const totals = { unchanged: 0, allow_to_deny: 0, deny_to_allow: 0 };
+    for (const s of Object.values(by)) {
+        totals.unchanged += s.unchanged;
+        totals.allow_to_deny += s.allow_to_deny;
+        totals.deny_to_allow += s.deny_to_allow;
+    }
+    const result = { object: 'authz_what_if', name: body.name ?? null, window: { since, until }, evaluated: rows.length, replayed, truncated: all.length > rows.length, skipped: skippedBy, by_source: by, totals, affected_principals: principals.size, samples: flips };
+    if (body.save === false)
+        return { ...result, status: 200 };
+    const describe = {
+        ...(c.abac ? { abac: c.abac } : {}),
+        ...(c.rbac ? { rbac: { roles: c.rbac.roles.map((r) => ({ type: r.type, key: r.key, organization_id: r.organizationId ?? null, add_permissions: r.addPermissions, remove_permissions: r.removePermissions })) } } : {}),
+        ...(c.fga ? { fga: { store_id: c.fga.storeId, writes: c.fga.writes, deletes: c.fga.deletes } } : {}),
+        ...(c.accessPolicy ? { access_policy: { draft: c.accessPolicy } } : {}),
+    };
+    const saved = (0, authz_state_1.st)(e).whatIf.insert({ name: body.name ?? null, candidate: describe, window_start: since, window_end: until, summary: { evaluated: rows.length, replayed, truncated: result.truncated, totals, affected_principals: principals.size, by_source: by }, result, created_at: e.clock.now() });
+    return { ...result, id: saved.id, created_at: saved.created_at, status: 201 };
+}
+const whatIfView = (r, full) => ({ object: 'authz_what_if_run', id: r.id, name: r.name, candidate: r.candidate, window: { since: r.window_start, until: r.window_end }, summary: r.summary, ...(full ? { result: r.result } : {}), created_by: null, created_at: r.created_at });
+/** One sync run: write what should exist; with `repair`, also delete managed tuples that no longer should. Only managed tuples are ever touched. */
+function runSync(e, kind, repair) {
+    const s = (0, authz_state_1.st)(e);
+    const now = e.clock.now();
+    const { written, deleted } = (0, authz_state_1.reconcileManaged)(e, repair);
+    const run = s.runs.insert({ kind, status: 'completed', store_id: s.config.store_id, repair, written, deleted, managed: s.managed.size, error: null, created_at: now, completed_at: now });
+    (0, authz_state_1.pushEvent)(e, 'sync_run', s.config.store_id, 'sync', { run_id: run.id, written, deleted });
+    e.webhooks.emit('fga_sync.completed', { object: 'fga_sync_run', id: run.id, store_id: s.config.store_id, written, deleted });
+    return run;
+}
+const runView = (r) => ({ object: 'fga_sync_run', id: r.id, kind: r.kind, status: r.status, store_id: r.store_id, repair: r.repair, tuples_written: r.written, tuples_deleted: r.deleted, managed_tuples: r.managed, error: r.error, created_at: r.created_at, completed_at: r.completed_at });
+const statusView = (e) => {
+    const s = (0, authz_state_1.st)(e);
+    const last = s.runs.all()[0];
+    return { object: 'fga_sync', enabled: s.config.enabled, store_id: s.config.store_id, memberships: s.config.memberships, org_roles: s.config.org_roles, groups: s.config.groups, managed_tuples: s.managed.size, last_run: last ? runView(last) : null, updated_at: s.config.updated_at };
+};
+function authzHandlers() {
+    return [
+        {
+            method: 'POST',
+            pattern: '/v1/authz/explain',
+            scope: 'authz_decisions:read',
+            handler: (c) => {
+                const input = (0, authz_layers_1.parseExplainBody)(c.body);
+                // Signals a caller proxies in headers (country, risk level, device trust) apply when the body does not say.
+                input.access = { ...input.access, signals: (0, access_signals_1.firstOf)(input.access?.signals, (0, access_signals_1.headerSignals)(c.request.headers)) };
+                return { body: (0, authz_layers_1.explainAccess)(c.engine, input) };
+            },
+        },
+        {
+            // The same role check, written to the decision log (the corpus what-if replays).
+            method: 'POST',
+            pattern: '/v1/authz/rbac/check',
+            scope: 'authz_decisions:read',
+            handler: (c) => {
+                const e = c.engine;
+                const subject = (c.body.subject ?? {});
+                if (typeof subject.id !== 'string' || !subject.id)
+                    throw bad('subject.id is required.', 'subject.id');
+                if (typeof c.body.permission !== 'string' || !c.body.permission)
+                    throw bad('permission is required.', 'permission');
+                if (c.body.organization_id !== undefined && typeof c.body.organization_id !== 'string')
+                    throw bad('organization_id must be a string.', 'organization_id');
+                const input = { userId: subject.id, permission: c.body.permission, organizationId: c.body.organization_id };
+                const r = (0, authz_layers_1.rbacCheck)(e, input);
+                (0, authz_layers_1.recordRbacCheck)(e, input, r);
+                const rules = [...r.layers.rbac.contributions, ...r.layers.org_roles.contributions, ...r.layers.groups.contributions].filter((x) => x.matched);
+                return { body: { object: 'rbac_check', allowed: r.allowed, decision: r.allowed ? 'allow' : 'deny', grants: r.grants, rules } };
+            },
+        },
+        {
+            method: 'POST',
+            pattern: '/v1/authz/what_if',
+            scope: 'authz_decisions:read',
+            handler: (c) => {
+                const { status, ...body } = runWhatIf(c.engine, c.body);
+                return { status, body };
+            },
+        },
+        { method: 'GET', pattern: '/v1/authz/what_if', scope: 'authz_decisions:read', handler: (c) => (0, util_1.listReply)(c, (0, authz_state_1.st)(c.engine).whatIf.all(), (r) => whatIfView(r, false)) },
+        {
+            method: 'GET',
+            pattern: '/v1/authz/what_if/:id',
+            scope: 'authz_decisions:read',
+            handler: (c) => {
+                const r = (0, authz_state_1.st)(c.engine).whatIf.get(c.params.id);
+                if (!r)
+                    throw (0, errors_1.notFound)('What-if run');
+                return { body: whatIfView(r, true) };
+            },
+        },
+        {
+            method: 'DELETE',
+            pattern: '/v1/authz/what_if/:id',
+            scope: 'authz_decisions:write',
+            handler: (c) => {
+                if (!(0, authz_state_1.st)(c.engine).whatIf.delete(c.params.id ?? ''))
+                    throw (0, errors_1.notFound)('What-if run');
+                return { body: { object: 'authz_what_if_run', id: c.params.id, deleted: true } };
+            },
+        },
+        // ── managed FGA sync ──
+        { method: 'GET', pattern: '/v1/fga/sync', scope: 'fga:read', handler: (c) => ({ body: statusView(c.engine) }) },
+        {
+            method: 'PUT',
+            pattern: '/v1/fga/sync',
+            scope: 'fga:write',
+            handler: (c) => {
+                const e = c.engine;
+                const s = (0, authz_state_1.st)(e);
+                const b = c.body;
+                for (const k of ['enabled', 'memberships', 'org_roles', 'groups'])
+                    if (b[k] !== undefined && typeof b[k] !== 'boolean')
+                        throw bad(`${k} must be true or false.`, k);
+                const storeId = b.store_id === undefined ? s.config.store_id : b.store_id;
+                if (storeId !== null && (typeof storeId !== 'string' || !(0, authz_state_1.storeExists)(e, storeId)))
+                    throw bad('store_id must be an existing FGA store.', 'store_id');
+                // Owned tuples live in one store: it cannot change under them.
+                if (storeId !== s.config.store_id && s.managed.size)
+                    throw new errors_1.EmulatorError('CONFLICT', 'The sync owns tuples in the current store. Purge them before changing the store.', 'store_id');
+                const enabled = b.enabled ?? s.config.enabled;
+                if (enabled && !storeId)
+                    throw bad('Enabling sync needs a store_id.', 'store_id');
+                const turningOn = enabled && !s.config.enabled;
+                Object.assign(s.config, { enabled, store_id: storeId, memberships: b.memberships ?? s.config.memberships, org_roles: b.org_roles ?? s.config.org_roles, groups: b.groups ?? s.config.groups, updated_at: e.clock.now() });
+                if (turningOn)
+                    runSync(e, 'initial', false);
+                return { body: statusView(e) };
+            },
+        },
+        {
+            method: 'POST',
+            pattern: '/v1/fga/sync/backfill',
+            scope: 'fga:write',
+            handler: (c) => {
+                const e = c.engine;
+                if (c.body.repair !== undefined && typeof c.body.repair !== 'boolean')
+                    throw bad('repair must be a boolean.', 'repair');
+                if (!(0, authz_state_1.st)(e).config.enabled || !(0, authz_state_1.st)(e).config.store_id)
+                    throw bad('Enable sync with a store before running a backfill.', 'enabled');
+                return { status: 202, body: runView(runSync(e, 'backfill', c.body.repair === true)) };
+            },
+        },
+        { method: 'GET', pattern: '/v1/fga/sync/runs', scope: 'fga:read', handler: (c) => (0, util_1.listReply)(c, (0, authz_state_1.st)(c.engine).runs.all(), runView) },
+        {
+            method: 'GET',
+            pattern: '/v1/fga/sync/runs/:id',
+            scope: 'fga:read',
+            handler: (c) => {
+                const r = (0, authz_state_1.st)(c.engine).runs.get(c.params.id);
+                if (!r)
+                    throw (0, errors_1.notFound)('Sync run');
+                return { body: runView(r) };
+            },
+        },
+        {
+            // Remove only the tuples the sync wrote, and forget them. Sync must be off.
+            method: 'POST',
+            pattern: '/v1/fga/sync/purge',
+            scope: 'fga:write',
+            handler: (c) => {
+                const e = c.engine;
+                const s = (0, authz_state_1.st)(e);
+                if (c.body.confirm !== true)
+                    throw bad('Send confirm: true to remove the tuples the sync wrote.', 'confirm');
+                if (!s.config.store_id)
+                    throw (0, errors_1.notFound)('Sync store');
+                if (s.config.enabled)
+                    throw new errors_1.EmulatorError('CONFLICT', 'Disable sync before purging.');
+                const n = s.managed.size;
+                const owned = [...s.managed.values()];
+                s.managed.clear();
+                if (owned.length)
+                    (0, authz_state_1.applyTuples)(e, s.config.store_id, [], owned, 'sync');
+                return { body: { object: 'fga.sync_purge', store_id: s.config.store_id, deleted: n, released: 0 } };
+            },
+        },
+        // ── the authorization event feed ──
+        {
+            method: 'GET',
+            pattern: '/v1/authz/events',
+            scope: 'fga:read',
+            handler: async (c) => {
+                const e = c.engine;
+                const s = (0, authz_state_1.st)(e);
+                const rawAfter = c.query.get('after');
+                const after = rawAfter === 'latest' ? s.seq : rawAfter === null ? 0 : Number(rawAfter);
+                if (!Number.isInteger(after) || after < 0)
+                    throw bad('after must be a sequence number or "latest".', 'after');
+                const limit = (0, support_1.intIn)(c.query.get('limit') ?? undefined, 'limit', 1, 500, 100);
+                const waitMs = (0, support_1.intIn)(c.query.get('wait_ms') ?? undefined, 'wait_ms', 0, MAX_WAIT_MS, 0);
+                const kinds = c.query.get('kinds')?.split(',').filter(Boolean);
+                const store = c.query.get('store_id');
+                const pick = () => s.events.filter((x) => x.seq > after && (!kinds || kinds.includes(x.kind)) && (!store || x.store_id === store));
+                const deadline = Date.now() + waitMs;
+                while (!pick().length && Date.now() < deadline)
+                    await new Promise((r) => setTimeout(r, 25));
+                const all = pick();
+                const page = all.slice(0, limit);
+                return { body: { object: 'list', data: page, has_more: all.length > limit, next_after: page.length ? page[page.length - 1].seq : after } };
+            },
+        },
+    ];
+}
+//# sourceMappingURL=authz.js.map

package/dist/handlers/authz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz.js","sourceRoot":"","sources":["../../src/handlers/authz.ts"],"names":[],"mappings":";;AA+NA,sCAmJC;AAhXD,sCAAoD;AAEpD,qDAA0D;AAC1D,mCAAyE;AACzE,iDAA0L;AAC1L,+CAAsG;AACtG,uCAAkC;AAClC,iCAAmC;AAEnC;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,KAAa,EAAE,EAAE,CAAC,IAAI,sBAAa,CAAC,mBAAmB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAEvG,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,KAAa,EAAO,EAAE;IAC7C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,GAAG,KAAK,qBAAqB,EAAE,KAAK,CAAC,CAAC;IAC/F,OAAO,CAAQ,CAAC;AAClB,CAAC,CAAC;AACF,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,KAAa,EAAY,EAAE;IACtD,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,GAAG,KAAK,6BAA6B,EAAE,KAAK,CAAC,CAAC;IAC7H,OAAO,CAAa,CAAC;AACvB,CAAC,CAAC;AACF,MAAM,SAAS,GAAG,CAAC,CAAU,EAAE,KAAa,EAAW,EAAE;IACvD,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,GAAG,KAAK,4BAA4B,EAAE,KAAK,CAAC,CAAC;IAC9E,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QACvL,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QACnG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAW,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AACF,MAAM,aAAa,GAAG,CAAC,CAAU,EAAE,KAAa,EAA2C,EAAE;IAC3F,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,GAAG,KAAK,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACpE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,MAAM,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QAClJ,IAAI,CAAC;YACH,IAAA,kBAAU,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,uBAAe;gBAAE,MAAM,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,aAAa,GAAG,CAAC,OAAO,kBAAkB,GAAG,CAAC,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7H,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AACF,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,KAAa,EAAsB,EAAE;IAC7D,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClF,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,GAAG,KAAK,kDAAkD,EAAE,KAAK,CAAC,CAAC;IAClG,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAQF,SAAS,cAAc,CAAC,IAAS;IAC/B,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,wBAAwB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,uBAAuB,CAAC,EAAE,CAAC;IAClL,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,GAAG,CAAC,kDAAkD,EAAE,sBAAsB,CAAC,CAAC;QACnK,GAAG,CAAC,IAAI,GAAG;YACT,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE;gBAC3C,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;oBAAE,MAAM,GAAG,CAAC,oCAAoC,EAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAC;gBACvI,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,GAAG;oBAAE,MAAM,GAAG,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC;gBACzG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,EAAE,CAAC;YACpQ,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,MAAM,GAAG,CAAC,qCAAqC,EAAE,wBAAwB,CAAC,CAAC;QAC9H,GAAG,CAAC,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,sBAAsB,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,CAAC;IACjJ,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;IAC9K,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,MAAM,GAAG,CAAC,iEAAiE,EAAE,WAAW,CAAC,CAAC;IACvJ,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,SAAS,SAAS,CAAC,CAAS,EAAE,IAAS;IACrC,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACzD,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAK,IAAe,GAAG,CAAC,IAAK,IAAe,GAAG,EAAE;YAAE,MAAM,GAAG,CAAC,uCAAuC,EAAE,MAAM,CAAC,CAAC;QACzI,KAAK,GAAG,KAAK,GAAI,IAAe,GAAG,UAAU,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,IAAI,KAAK;QAAE,MAAM,GAAG,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;IACtE,IAAI,KAAK,GAAG,KAAK,GAAG,EAAE,GAAG,UAAU;QAAE,MAAM,GAAG,CAAC,oCAAoC,EAAE,OAAO,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,IAAK,KAAgB,GAAG,gBAAgB;QAAE,MAAM,GAAG,CAAC,sCAAsC,gBAAgB,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7K,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QAAE,MAAM,GAAG,CAAC,kDAAkD,EAAE,MAAM,CAAC,CAAC;IAChK,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAA,yBAAW,EAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,GAAG,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;IACvG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAA,0BAAW,EAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,GAAG,CAAC,2CAA2C,EAAE,wBAAwB,CAAC,CAAC;IAE9H,MAAM,EAAE,GAAgC,EAAE,CAAC;IAC3C,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzF,MAAM,KAAK,GAAU,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,CAAC,GAAQ,EAAE,MAAwB,EAAE,KAAuB,EAAE,QAAiB,EAAE,EAAE;QAC9F,QAAQ,EAAE,CAAC;QACX,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC;QACvH,CAAC,CAAC,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ;YAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC;QACpC,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QAChD,IAAI,MAAM,KAAK,OAAO;YAAE,CAAC,CAAC,aAAa,EAAE,CAAC;;YACrC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1L,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,sBAAO,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAA,2BAAY,EAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAA,gBAAE,EAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAM,IAAI,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAe,CAAC,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;gBAClF,MAAM,GAAG,GAAG,GAAG,CAAC,KAA4B,CAAC;gBAC7C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACvE,IAAI,CAAC,UAAU,CAAC,CAAC;oBACjB,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,IAAA,yBAAU,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC;gBAC1C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAA,yBAAU,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvE,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC/C,IAAI,CAAC,qBAAqB,CAAC,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAA,iCAAkB,EAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC9G,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzC,IAAI,GAAG,CAAC,aAAa,EAAE,QAAQ,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;oBAClD,IAAI,CAAC,aAAa,CAAC,CAAC;oBACpB,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC1B,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;oBACxC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACjB,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC;gBACtG,MAAM,GAAG,GAAG,IAAA,uBAAQ,EAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC/D,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7I,CAAC;;gBAAM,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;QAC9G,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,cAAc,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,iHAAiH;IACjH,IAAI,CAAC,CAAC,YAAY;QAAE,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC;QAChC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,CAAC;QACxC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3Q,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;IACF,MAAM,KAAK,GAAG,IAAA,gBAAE,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxS,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAM,EAAE,IAAa,EAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;AAEpS,oJAAoJ;AACpJ,SAAS,OAAO,CAAC,CAAS,EAAE,IAA4B,EAAE,MAAe;IACvE,MAAM,CAAC,GAAG,IAAA,gBAAE,EAAC,CAAC,CAAC,CAAC;IAChB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAA,8BAAgB,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1L,IAAA,uBAAS,EAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7H,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAM,EAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;AACzS,MAAM,UAAU,GAAG,CAAC,CAAS,EAAO,EAAE;IACpC,MAAM,CAAC,GAAG,IAAA,gBAAE,EAAC,CAAC,CAAC,CAAC;IAChB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AAC3R,CAAC,CAAC;AAEF,SAAgB,aAAa;IAC3B,OAAO;QACL;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,mBAAmB;YAC5B,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,KAAK,GAAG,IAAA,+BAAgB,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACvC,4GAA4G;gBAC5G,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAA,wBAAO,EAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAA,8BAAa,EAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC9G,OAAO,EAAE,IAAI,EAAE,IAAA,4BAAa,EAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YAClD,CAAC;SACF;QACD;YACE,iFAAiF;YACjF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,sBAAsB;YAC/B,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAQ,CAAC;gBAC9C,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE;oBAAE,MAAM,GAAG,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;gBACtG,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU;oBAAE,MAAM,GAAG,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;gBACpH,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC,mCAAmC,EAAE,iBAAiB,CAAC,CAAC;gBAC1J,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,eAAqC,EAAE,CAAC;gBAClI,MAAM,CAAC,GAAG,IAAA,wBAAS,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC9B,IAAA,8BAAe,EAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC7B,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACpJ,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACjI,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,mBAAmB;YAC5B,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAQ,CAAC;gBAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC1B,CAAC;SACF;QACD,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAS,EAAC,CAAC,EAAE,IAAA,gBAAE,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE;QACpK;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,uBAAuB;YAChC,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,IAAA,gBAAE,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/C,IAAI,CAAC,CAAC;oBAAE,MAAM,IAAA,iBAAQ,EAAC,aAAa,CAAC,CAAC;gBACtC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;YACvC,CAAC;SACF;QACD;YACE,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,uBAAuB;YAChC,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,IAAI,CAAC,IAAA,gBAAE,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;oBAAE,MAAM,IAAA,iBAAQ,EAAC,aAAa,CAAC,CAAC;gBAClF,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YACnF,CAAC;SACF;QACD,yBAAyB;QACzB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;QAC/G;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,cAAc;YACvB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,IAAA,gBAAE,EAAC,CAAC,CAAC,CAAC;gBAChB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,KAAK,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAU;oBAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;wBAAE,MAAM,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC;gBAC7K,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC1E,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAA,yBAAW,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBAAE,MAAM,GAAG,CAAC,yCAAyC,EAAE,UAAU,CAAC,CAAC;gBACpJ,+DAA+D;gBAC/D,IAAI,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI;oBAAE,MAAM,IAAI,sBAAa,CAAC,UAAU,EAAE,kFAAkF,EAAE,UAAU,CAAC,CAAC;gBACzL,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC9C,IAAI,OAAO,IAAI,CAAC,OAAO;oBAAE,MAAM,GAAG,CAAC,iCAAiC,EAAE,UAAU,CAAC,CAAC;gBAClF,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC1N,IAAI,SAAS;oBAAE,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC5C,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uBAAuB;YAChC,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,GAAG,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;gBACxH,IAAI,CAAC,IAAA,gBAAE,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,IAAA,gBAAE,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,GAAG,CAAC,qDAAqD,EAAE,SAAS,CAAC,CAAC;gBACjI,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YACxF,CAAC;SACF;QACD,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAS,EAAC,CAAC,EAAE,IAAA,gBAAE,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,EAAE;QAClI;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,uBAAuB;YAChC,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,IAAA,gBAAE,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC7C,IAAI,CAAC,CAAC;oBAAE,MAAM,IAAA,iBAAQ,EAAC,UAAU,CAAC,CAAC;gBACnC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9B,CAAC;SACF;QACD;YACE,4EAA4E;YAC5E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oBAAoB;YAC7B,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,IAAA,gBAAE,EAAC,CAAC,CAAC,CAAC;gBAChB,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI;oBAAE,MAAM,GAAG,CAAC,yDAAyD,EAAE,SAAS,CAAC,CAAC;gBAC7G,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,IAAA,iBAAQ,EAAC,YAAY,CAAC,CAAC;gBACrD,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,sBAAa,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;gBAC1F,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;gBACzB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBACtC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,IAAI,KAAK,CAAC,MAAM;oBAAE,IAAA,yBAAW,EAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBACvE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YACtG,CAAC;SACF;QACD,qCAAqC;QACrC;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,kBAAkB;YAC3B,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,CAAC,GAAG,IAAA,gBAAE,EAAC,CAAC,CAAC,CAAC;gBAChB,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,KAAK,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC,8CAA8C,EAAE,OAAO,CAAC,CAAC;gBAC9G,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC7E,MAAM,MAAM,GAAG,IAAA,eAAK,EAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBACxF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC/D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC;gBACnI,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;gBACrC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;oBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC5F,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBACjC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9I,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/handlers/billing.d.ts

@@ -0,0 +1,100 @@
+import type { Engine, RouteDef } from '../engine';
+import { EmulatorError } from '../errors';
+import type { Obj } from '../openapi';
+import { Table } from '../store';
+interface Balance {
+    granted: number | null;
+    usage: number;
+    unlimited: boolean;
+}
+interface Bill {
+    subs: Table;
+    invoices: Table;
+    refunds: Table;
+    usage: Table;
+    extensions: Map<string, Obj>;
+    consumes: Map<string, Obj>;
+    balances: Map<string, Balance>;
+    catalogue: Map<string, {
+        features: string[];
+        limits: Obj;
+    }>;
+    /** What the provider owes the customer (credit left over from a downgrade), minor units per `type|id`; applied to the next invoice. */
+    customerBalance: Map<string, number>;
+}
+/** A body key outside `allowed` is refused (the real routes are strict). */
+declare function known(body: Obj, allowed: string[]): void;
+declare function subject(e: Engine, body: Obj): {
+    type: string;
+    id: string;
+};
+declare function emitSub(e: Engine, type: string, s: Obj, prev: Obj | null, reason?: string, extra?: Obj): void;
+interface EntSnap {
+    planId: string;
+    plan: string | null;
+    status: string;
+    features: string[];
+    limits: Obj;
+}
+/** What a subject is entitled to now: its live (active or trialing) subscriptions merged; undefined when none. */
+declare function entSnap(e: Engine, type: string, id: string): EntSnap | undefined;
+/** entitlement.created / updated / deleted, only when the resolved entitlement moved. */
+declare function emitEnt(e: Engine, type: string, id: string, before: EntSnap | undefined): void;
+/** shortcut: a plan's `amount` is display text ("$9.00"); its digits read as major units, 0 when absent. */
+declare function priceCents(plan: Obj | undefined, interval: string): number;
+/** One invoice line: a renewal charge, or a proration (a credit for unused time is negative). */
+interface Line {
+    description: string;
+    amount: number;
+    quantity: number;
+    proration: boolean;
+    plan_id: string | null;
+    period_start: number;
+    period_end: number;
+}
+/** The invoice the subscription's next billing would produce: renewal at the plan's price plus the proration items waiting, less customer balance. */
+declare function draft(e: Engine, s: Obj, at: number): {
+    lines: Line[];
+    total: number;
+    applied: number;
+    due: number;
+    currency: string;
+};
+/**
+ * The period lifecycle, applied lazily on every billing read and write so advancing the clock does the work: a trial that
+ * has ended becomes active (past_due when the subscription's payment is set to fail), and each passed period end either
+ * ends a subscription set to cancel, applies a scheduled plan change, or renews for another period; each billable event
+ * gets an invoice.
+ */
+declare function settle(e: Engine): void;
+export declare function billingHandlers(): RouteDef[];
+/** The state and helpers the provider-webhook, store-link, Connect and referral-reward routes (emu4-billing.ts) share with this module. */
+export declare const billingInternals: {
+    st: (e: Engine) => Bill;
+    planOf: (e: Engine, id: string | undefined | null) => Obj | undefined;
+    subView: (e: Engine, s: Obj) => Obj;
+    emitSub: typeof emitSub;
+    emitEnt: typeof emitEnt;
+    entSnap: typeof entSnap;
+    settle: typeof settle;
+    liveSub: (e: Engine, type: string, id: string) => Obj | undefined;
+    invoiceView: (e: Engine, i: Obj) => Obj;
+    draft: typeof draft;
+    lineView: (currency: string, l: Line) => Obj;
+    balKey2: (s: Obj) => string;
+    day: (t: number) => string;
+    DAY: number;
+    MONTH: number;
+    periodLen: (interval: string | undefined) => number;
+    priceCents: typeof priceCents;
+    bad: (message: string, param: string) => EmulatorError;
+    conflict: (m: string, meta?: Obj) => EmulatorError;
+    unsupported: (m: string) => EmulatorError & {
+        status: number;
+    };
+    known: typeof known;
+    subject: typeof subject;
+    PROVIDERS: readonly ["stripe", "polar", "dodo", "creem", "chargebee", "autumn", "commet", "paddle", "lemonsqueezy", "revenuecat", "appstore", "googleplay"];
+    STORE_OWNED: Set<string>;
+};
+export type { Line as InvoiceLine };